CVE-2022-24652
sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in php code execution in /admin/upload/upload.
CVSS 3.1 · 9.8 Critical
EPSS 2.7%
KEV · Not listed
Vendors
Products